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TNT THK CLAIMS: 

Amended claims follow: 

1 1. (Currently Amended) A method for reporting on network analysis, comprising: 

2 (a) collecting network traffic information utiUzing a plurality of agents installed in 

3 computers distributed among a plurality of zones; 

4 (b) receiving the network traffic information collected from the agents associated 

5 with each zone at a separate hosLcontroUer; and 

6 (c) transmitting a report on the network traffic information from the hosLcontroUer ^ 

7 to a computer coupled thereto via a network; CD 

8 wherein a plurality of consoles are coupled to the hosLcontroUer for collecting — •- 

9 the network traffic information from the hosLcontroUer and displaying the network ^ 

1 0 traffic information from the hosLcontroUer, wherein a user interface is adapted for Q 

1 1 analyzing an output; Q 

12 wherein a map of the network is generated based on the network traffic 

13 information; 

14 wherein the report includes a plurality of objects in a tree representation; 

1 5 wherein intrusion detection services are provided based on the network traffic Q 

16 information; 

wherein the network traffic information relates to wire less network traffic; 

17 wherem at least one zone controller chooses a por t number associated with an 

18 a pplication and pushes a configuration r equest to a plurality of the host controllers in an 

19 associated zone, and the host controllers push the configuration requests to the agents so 

20 that the agents beedn to monitor a port associate d with the port number, such that 

21 monitor data is sent from the agents to the host controllers and buffered, wh ereafter the 

22 host controllers update the at least one zone controller with consoUdatcd monitor data, 

23 where differences in delay times are calculated to construct an enterprise pictu re of 

24 latency . 
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1 2. (Original) The method as recited in claim 1, wherem the report is capable of 

2 being displayed on the computer utilizing a network browser. 

1 3 . (Original) The method as recited in claim 1 , wherein the network includes the 

2 Internet. 

1 4. (Currently Amended) The method as recited in claim 1, and further comprising 

2 receiving a request at one of the host c ontrollers for a report on the network 

3 traffic infonnation corresponding to the zone associated with the hosLcontroUer. 



1 6. (Original) The method as recited in claim 1 , wherein the report includes a 

2 network analyzer report. 

1 7. (Cancelled) 



1 9. (Currently Amended) A computer program product for reportmg on network 

2 analysis, comprising: 

3 (a) computer code for collecting network traffic information utilizing a plurality of 

4 agents installed in computers distributed among a plurality of zones; 

5 (b) computer code for receiving the network traffic information collected from the 

6 agents associated with each zone at a separate host c ontroller; and 

7 (c) computer code for transmitting a report on the network traffic information from 

8 the host c ontroller to a computer coupled thereto via a network; 
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1 5. (Original) The method as recited in claim 4, wherein the report is transmitted in 

2 response to the request. ^> 

O 

^mmm 

Q 

O 
O 

1 8. (Cancelled) 
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9 wherein a plurality of consoles are coupled to the host controller for collecting 

1 0 the network traffic information from the hosLcontroller and displaymg the network 

1 1 traffic information from the host c ontroller, wherein a user interface is adapted for 

1 2 analyzing an output; 

1 3 wherein a map of the network is generated based on the network traffic 

14 information; 

1 5 wherein the report includes a plurahty of objects in a tree representation; 

1 6 wherein intrusion detection services are provided based on the network traffic 

1 7 information; 

wherein the network traffic information relates to wirele ss network traffic: 

18 wherein at least one zone controller chooses a port numbe r associated with an </> 

19 a pplication and pushes a configuration request to a plurality of the host cont rollers in an ^ 

20 associated zone, and the host controllers push the c onfiguration requests to the agents so ^ 

21 that the agents begin to monitor a port associated with the port number, such that 

22 monitor data is sent from the agents to the host co ntrollers and buffered, whereafter the Q 

23 host controllers update the at least one zone controller wit h consolidated monitor data, 

24 where differences in delay times are calculated to constr uct an enterprise picture of 

25 latency . 



1 10. (Original) The computer program product as recited in claim 9, wherein the 

2 report is capable of being displayed on the computer utilizing a network 

3 browser. 

1 11. (Original) The computer program product as recited in claim 9, wherein the 

2 network includes the Internet. 

1 12. (Currently Amended) The computer program product as recited in claim 9, and 

2 further comprising receiving a request at one of the host controllers for a report 
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3 on the network traffic infomiation corresponding to the zone associated with the 

4 host c ontroller. 

1 13. (Original) The computer program product as recited in claim 12, wherein the 

2 report is transmitted in response to the request. 

1 1 4. (Original) The computer program product as recited in claim 9, wherein the 

2 report includes a network analyzer report. 

CD 

1 15. (Cancelled) 

CO 

1 16. (Cancelled) ^ 

Q 

1 17. (Currently Amended) A system for reporting on network analysis, comprising: 

2 (a) logic for collecting network traffic information utilizing a plurality of agents 

3 installed in computers distributed among a plurality of zones; ^p" 

4 (b) logic for receiving the network traffic information collected firom the agents 

5 associated with each zone at a separate host c ontroller; and q 

6 (c) logic for transmitting a report on the networic traffic information from the host 

7 controller to a computer coupled thereto via a network; 

8 wherein a plurality of consoles are coupled to the host controller for collecting 

9 the network traffic information jfrom the host controller and displaying the network 

1 0 traffic information from the host controller, wherein a user interface is adapted for 

1 1 analyzing an output; 

12 \rtierein a map of the network is generated based on the network traffic 

13 information; 

14 wherein the report includes a plurality of objects in a tree representation; 

1 5 wherein intrusion detection services are provided based on the network traffic 

16 information; 
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wherein the network traffic infonnation relates to wireless network traffic: 

17 wherein at least one zone controller chooses a port number associated with an 

18 application and pushes a configuration request to a plurality of the host coptrolleis in an 

19 associated zone, and the host controllers push the configuration requests to the agents so 

20 that the agents begin to monitor a port associated with the port number, such that 

21 monitor data is sent fi-om the agents to the host controllers and buffered, whereaft^ the 

22 host controllers update the at least one zone controller with consolidated monitor data. 

23 where differences in delay times are calculated to construct an enterprise picture of 

24 latency . 

DO 

CD 

1 18, (Original) The system as recited in claim 1 7, wherein the report is capable of CO 

2 being displayed on the computer utilizing a network browser. 

Q 

1 19. (Qnginal) The system as recited in claim 17, wherein the network includes the SS- 

2 Internet. Q 

1 20. (Currently Amended) The system as recited in claim 17, and further comprising ^ 

2 receiving a request at one of the host controllers for a report on the network 

3 traffic information corresponding to the zone associated with the host controller. 

1 21 . (Original) The system as recited in claim 20, wherein the report is transmitted in 

2 response to the request. 

1 22. (Original) The system as recited in claim 17, wherein the report includes a 

2 network analyzer report. 

1 23. (Cancelled) 
1 24. (Cancelled) 
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1 25. (Currently Amended) A method for reporting on network analysis, comprising: 

2 (a) collecting network traffic information utilizing a plurality of agents installed in 

3 computers distributed among a plurality of zones; 

4 (b) receiving the network trafiGc information collected from the agents associated 

5 with each zone at a separate host controller; 

6 (c) receiving a request at one of the host c ontrollers for a report on the network 

7 traffic information corresponding to the zone associated with the host c ontroller: 

8 and 

9 (d) transmitting the report from the host c ontroller to a computer coupled thereto via 

10 a network; 

rr 

1 1 (e) wherein the report is capable of being displayed on the computer utilizing a ^ 

12 network browser; C/> 

1 3 wherein a pluraUty of consoles are coupled to the host c ontroller for collecting ^> 

14 the network traffic information from the host controller and displaying the network ^ 

1 5 traffic information from the host controller, wherein a user interface is adapted for — ' 

16 analyzing an output; 

17 wherein a map of the network is generated based on the network traffic 

18 infonnation; 

19 wherein the report includes a plurality of objects in a tree representation; 

20 wherein intrusion detection services are provided based on the network traffic 

21 infonnation; """^ 

wherein the network traffic information relates to wireless network traffic: 

22 wherein at least one zone controller chooses a port number associated with an 

23 application and pushes a configuration request to a plurality of the host controllers in an 

24 associated zone, and the host controllers push the configuration requests to the agents so 

25 that the agents begin to monitor a port associated with the port number, such that 

26 monitor data is sent from the agents to the host controllers and buffered, whereafter the 

27 host controllers update the at least one zone controller with consolidated monitor data. 
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28 where differences in delay times are calculated to construct an ente rprise picture of 

29 latency . 

1 26. (Currently Amended) A method for reporting on network analysis, comprising: 

2 collecting network traffic in formation utilizing a plurality of information 

3 collectors installed in computers distributed among a plurality of zones; 

4 receiving the network traffic information collected from the information 

5 collectors associated with each zone at an information collector manager; and 

6 generating a report on the network traffic information associated with a selected 

7 one of the zones; CD 

c/> 

8 wherein a plurality of consoles are coupled to the information collector manager — ^ 

9 for collecting the network traffic information fi-om the information collector manager 

1 0 and displaying the network traffic information firom the information collector manager, Q 

1 1 wherein a user interface is adapted for analyzing an output; 

12 wherein a map of a network is generated based on the network traffic 

13 information; 

14 wherein the report includes a plurality of objects in a tree representation; 

1 5 wherein intrusion detection services are provided based on the network traffic 

16 information; ^5 

wherein the network traffic information relates to wireless network traffic; 

17 wherein at least one zone controller chooses a port number associated with an 

18 application and pushes a configumtion request to a plurality of the information collector 

19 managers in an associated zone, and the information collector managers push the 

20 configuration requests to the information collectors so that the information collectors 

21 be gin to monitor a port associated with the port number, such that monitor data is sent 

22 from the information collectors to the information collector managers and buffered, 

23 whereafter the information collector managers update the at least one zone controller 

24 with consolidated monitor data, where differences in delay times are calculated to 

25 construct an enterprise picture of latency . 

NAI1P064 01.306.01 -8- 



PACE 15/21 * RCVD AT 7/15/2004 4:39:35 PM {Eastern Daylight Time] * SVR;USPTO-EFXRF-1/1 * [>NIS:872&306* CSiD:40S 071 4660* DURATION (inm-SS):00-34 



Jul 15 04 12:52p SVIPG 



408 971 4660 



p. 16 



1 27. (Cancelled) 

1 28. (Currently Amended) A computer program product for reporting on network 

2 analysis, comprising: 

3 computer code for collecting network traffic information utilizing a plurality of 

4 information collectors installed in computers distributed among a plurality of zones; 

5 computer code for receiving the network traffic information collected from the 

6 information collectors associated with each zone at an information collector manager, 

7 and C0 

8 computer code for generating a report on the network traffic information €^ 

associated with a selected one of the zones; 



Q 

a 

g[ 

(D 



9 

10 wherein a pluiaUty of consoles are coupled to the information collector manager 

1 1 for collecting the network traffic information from the information collector manager 

12 and displaying the network traffic information from the information collector manager, 

1 3 wherein a user interface is adapted for analyzing an output; 

14 wherein a map of a network is generated based on the network traffic ^ 

15 information; Q 

16 wherein the report includes a plurality ofobjects in a tree representation; 

1 7 wherein intrusion detection services are provided based on the network traffic •*< 

18 information; 

wherein the nfttwork trafGc information relates to wireless network traffic; 

19 wherein at least one zone c o ntroller chooses a port number associated with an 

20 ap plication and pnshes a configur ; .tinn rennest to a plurality of the information collector 

21 managers in an a<Kociated zo p ^ and the information collector managers push the 

22 r.>>nfi piiration rpn..e..rts to the in formation collectors SO that the information collectors 

23 he pin to monitor a nort associa t ed with the port number, such that monitor data is sent 

24 fmm the information collectors to the in f ormation collector managers and buffered, 

25 whereafter the information co llector managers update the at least one zone contrpller 
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26 with consolidate^ mc^nitor dat a - where differences m delay times are calculated to 

27 construct an enterprise picture of latency. 

1 29. (Cancelled) 
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